Skip to content

The ZeroTrace stack

Six layers, sold separately, designed to compose. A freelance pentester, a 30-student lab, and an internal red team all run the same workflow at different scales.

Six layers

Each layer is a real product

Pick the ones you need. Add the rest later. Same trust model at every layer.

Physical layer

HID hardware

Hand-assembled in Germany. Ghost, Mini, BLELogger. Plug, run, unplug. No phone-home.

Browse devices
What the device runs

Firmware

Lifetime updates. Web UI, live script editing, recon and self-destruct modes. Same kit works the same way next year.

View firmware
Local control plane

Companion app

Pair, configure, monitor. Runs on your machine — not a vendor cloud. Dashboard + integrated terminal.

See the app
Investigation layer

OSINT toolkit

70+ tools across 11 categories. Free public sources only. Investigation profiles export to PDF.

Open OSINT
Workflow plumbing

Proxy suite

Extraction, checking, leak testing, chain & rotation. Rounds out the testing pipeline without third-party SaaS.

Open Proxy
Institutional layer

Lab program

Pre-packaged HW + software + curriculum for universities, training providers, internal red teams.

Explore labs
One workflow

How an engagement runs through the stack

Each step uses one or two layers. The artefacts move forward.

01

Recon

OSINT investigation profiles · target enumeration

02

Plan

Companion app · script editor · scope letter

03

Execute

HID hardware + firmware · payload run · captures

04

Validate

Proxy chain testing · leak checks

05

Report

OSINT PDF export · evidence handoff

What every layer respects

Three principles, end to end

The brand floor isn’t a marketing line — it shows up the same way at every layer.

Tools you own

One purchase, lifetime updates, no cloud account that has to stay alive for the device to work.

Made in Germany, no logs

Hand-assembled in the EU. Customer operational data never leaves your machine.

One workflow, sold as parts

Each layer is a real product you can buy on its own. They are designed to compose, not to lock you in.

Command Palette

Search for a command to run...